tocsin

CVE-2017-18874

2 advisories.

Go/github.com/mattermost/mattermost-server CVE-2017-18874: medium

Mattermost Server is vulnerable to Directory Traversal by System Admins

Action: Upgrade github.com/mattermost/mattermost-server to 4.1.2-0.20171004201910-6be8113eb60 or later.

go get github.com/mattermost/mattermost-server@v4.1.2-0.20171004201910-6be8113eb60
go get github.com/mattermost/mattermost-server@v4.2.1-0.20171004194140-6d3cb2ce07fc
go get github.com/mattermost/mattermost-server@v4.3.0

Affected

introducedfixedlast affected
04.1.2-0.20171004201910-6be8113eb60-
4.2.0-rc14.2.1-0.20171004194140-6d3cb2ce07fc-
4.3.0-rc14.3.0-

Fixed versions

4.1.2-0.20171004201910-6be8113eb604.2.1-0.20171004194140-6d3cb2ce07fc4.3.0

Sources

CVE-2017-18874 · published · modified · JSON

Go/github.com/mattermost/mattermost-server CVE-2017-18874: unknown

Mattermost Server is vulnerable to Directory Traversal by System Admins in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost-server to 4.2.0+incompatible or later.

go get github.com/mattermost/mattermost-server@v4.2.0+incompatible
go get github.com/mattermost/mattermost-server@v4.3.0+incompatible

Affected

introducedfixedlast affected
4.2.0-rc1+incompatible4.2.0+incompatible-
4.3.0-rc1+incompatible4.3.0+incompatible-

Fixed versions

4.2.0+incompatible4.3.0+incompatible

Sources

CVE-2017-18874 · published · modified · JSON